Northwind — Azure tenant
AF
Northwind ProductionNorthwind Foundry
Readynorthwind.onmicrosoft.com / Knowledge / sub-8841-northwind · Azure AI Foundry · sub-8841-northwind · swedencentral · scoped to Knowledge Base
What this account can read
Each capability is called with the exact query recorded beside it, as the read-only identity. A capability that cannot run is declared here — before a run depends on it.
| Capability | Exact query issued | Required for | Result |
|---|---|---|---|
| Deployment logs | AzureDiagnostics | where Category == 'RequestResponse' | Discovery | PASS |
| Cost management | CostManagement.Query.usage | Cost baseline | PASS |
| Prompt capture | content logging flag | Replay | DENIED — permission missing |
Prompt capture is denied, so Replay cannot run. $13,200/month stays visible on the bill and unattributable to anything.
Required services
- Log Analytics workspacePRESENT
- Cost Management exportPRESENT
Access
This account is read through a single read-only permission binding. Deleting it revokes everything — there is nothing else to clean up, and nothing we hold can write to your cloud.